[clug] [OT] FireEye on Email Attacks - only 1/3 via attachments, 1 in 6 use malware

[Robert Edwards]

On 11/10/19 12:57 pm, steve jenkin via linux wrote:
> After the recent reveal that ANU was compromised by a well targeted spear phising attack, I found this infographic ‘illuminating’.
> 
> While “Microsoft Users” are more heavily targeted and rate of increase in attacks has recently approx doubled each quarter,
> “not Microsoft” isn’t the defence it once was.
> 
> FireEye is the company that took over Mandiant, the firm that disclosed the first APT report in 2013.
> While they sell security services, freely releasing reports and infographics is generous on their part - not something they have to do.
> 

+1

FireEye publish (aka publicise, promote) lots of interesting cyber
security data. I found this page quite illuminating some weeks ago:
https://www.fireeye.com/current-threats/apt-groups.html

I wonder how accurate it is? (no reason to believe it isn't, but
then again, we are discussing issues where subterfuge reigns).

cheers,
Bob Edwards.

> ==================
> 
> The 3 Ts of An Email Attack:TACTICS, TECHNIQUES, TARGETS
> © 2019 FireEye, Inc.
> 
> Attackers constantly adapt their tactics, techniques and targets to get past email security defenses.
> The following trends and data,
> distilled from 2.2 billion+ emails from April-June 2019,
> can help you better prepare for attacks by showing you what to expect.
> 
> <https://content.fireeye.com/one-email/ig-the-3-ts-of-email-attacks>
> 	86% of email attacks are malwareless
> 	Malwareless = Impersonation attacks, CEO fraud, spear phishing
> 
> 	62% URL-based attacks
> 	38% Attachment-based attack
> 
> 	181% Increase in Microsoft-based phishing attacks from Q1 to Q2 2019
> --
> Steve Jenkin, IT Systems and Design
> 0412 786 915 (+61 412 786 915)
> PO Box 38, Kippax ACT 2615, AUSTRALIA
> 
> mailto:sjenkin at canb.auug.org.au http://members.tip.net.au/~sjenkin
> 
>